| CVE-2026-1501 |
IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation
|
3.7
Low
|
Oct 19, 2026 |
| CVE-2026-1510 |
IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection
|
4.7
Medium
|
Oct 19, 2026 |
| CVE-2026-3303 |
IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out…
|
3.7
Low
|
Oct 19, 2026 |
| CVE-2026-3628 |
IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions
|
5.3
Medium
|
Oct 19, 2026 |
| CVE-2026-4405 |
IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the system
|
4.0
Medium
|
Oct 19, 2026 |
| CVE-2026-4413 |
IBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting
|
6.1
Medium
|
Oct 19, 2026 |
| CVE-2026-6719 |
IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt…
|
7.5
High
|
Oct 19, 2026 |
| CVE-2026-6930 |
IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt…
|
3.7
Low
|
Oct 19, 2026 |
| CVE-2026-15661 |
IBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper…
|
5.3
Medium
|
Oct 19, 2026 |
| CVE-2026-6544 |
IBM Concert 1.0.0 through 3.0.0 allows recursive copying of directories without proper controls which can lead to…
|
6.2
Medium
|
Sep 24, 2026 |
| CVE-2026-6935 |
IBM Concert 1.0.0 through 3.0.0 invokes operating system commands without fully qualifying executable paths or…
|
7.8
High
|
Sep 23, 2026 |
| CVE-2026-6928 |
IBM Concert 1.0.0 through 3.0.0 references or accesses memory after it has been freed
|
9.8
Critical
|
Sep 23, 2026 |
| CVE-2026-6925 |
IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to traverse directories on the system
|
5.3
Medium
|
Sep 23, 2026 |
| CVE-2026-6794 |
IBM Concert 1.0.0 through 3.0.0 has a double free vulnerability that exists due to incorrect memory management
|
7.8
High
|
Sep 23, 2026 |
| CVE-2026-6730 |
IBM Concert 1.0.0 through 3.0.0 is vulnerable to a buffer overflow, caused by improper bounds checking
|
9.8
Critical
|
Sep 23, 2026 |
| CVE-2026-6721 |
IBM Concert 1.0.0 through 3.0.0 allows an unauthenticated remote attacker can supply specially crafted input that is…
|
9.8
Critical
|
Sep 23, 2026 |
| CVE-2026-6718 |
IBM Concert 1.0.0 through 3.0.0 is vulnerable to improper access control which allows unauthorized modification of…
|
6.2
Medium
|
Sep 23, 2026 |
| CVE-2026-6327 |
IBM Concert 1.0.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper…
|
4.3
Medium
|
Sep 23, 2026 |
| CVE-2026-3626 |
IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to obtain sensitive information when a detailed…
|
5.3
Medium
|
Sep 23, 2026 |
| CVE-2026-17472 |
IBM Concert 1.0.0 through 3.0.0 could allow a remote authenticated attacker to access or modify unauthorized resources…
|
9.6
Critical
|
Sep 22, 2026 |
| CVE-2026-17465 |
IBM Concert 1.0.0 through 3.0.0 could allow a remote authenticated attacker to cause a denial of service due to improper…
|
6.5
Medium
|
Sep 22, 2026 |
| CVE-2026-16426 |
IBM Concert 1.0.0 through 3.0.0 is vulnerable to server-side request forgery (SSRF)
|
6.5
Medium
|
Sep 22, 2026 |
| CVE-2026-15915 |
IBM Concert 1.0.0 through 3.0.0 could allow a local attacker to obtain sensitive information due to recursive copying of…
|
6.2
Medium
|
Sep 22, 2026 |
| CVE-2025-12767 |
IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to cause a denial of service using a specially crafted…
|
5.3
Medium
|
Sep 22, 2026 |
| CVE-2025-36084 |
IBM Concert 1.0.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to…
|
5.9
Medium
|
Sep 22, 2026 |